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What is Claimed: 

1 . A method for maintaining the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment, 
comprising: 

storing an image of at least one nexus graphical user interface element associated with 
a first process running on said secured execution environment; and 

displaying said nexus graphical user interface element on said display completely on a 
display, such that no part of said nexus graphical user interface element is obscured by a 
graphical user interface element associated with said second execution environment on said 
display. 

2. The method of claim 1, where said step of displaying said nexus graphical user 
interface element comprises: 

ensuring that said nexus graphical user interface element contains no areas of 
transparency. 

3. The method of claim 1, where said step of displaying said nexus graphical user 
interface element on a display comprises displaying said nexus graphical user interface 
element such that no part of said nexus graphical user interface element is obscured by a 
graphical user interface element associated with a second process running on said secured 
execution environment. 

4. The method of claim 1, further comprising: 

displaying only said graphical user interface elements on said display upon receipt of 
a user secure display indication. 

5. A method for maintaining the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment, 
comprising: 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus graphical user interface element comprising said nexus-user secret 
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on said display, where nexus graphical user interface element is associated with a process 
running on said secured execution environment. 

6. The method of claim 5, where said step of displaying a nexus graphical user 
interface element comprising said nexus-user secret on a display comprises: 

accepting a user nexus-user secret display indication; and 
displaying said nexus-user secret. 

7. A method for maintaining the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment, 
comprising: 

accepting at least two nexus graphical data elements, each associated with a process 
running on said secured execution environment, for display on said display; and 

displaying at least two nexus graphical user interface elements, each of said nexus 
graphical user interface elements comprising one of said nexus graphical data elements and a 
common graphical user interface decoration. 

8. The method of claim 7, where said common graphical user interface 
decoration comprises a colored border. 

9. The method of claim 7, where said common graphical user interface 
decoration comprises one or more randomly selected images. 

10. The method of claim 7, further comprising: 

changing said common graphical user interface decoration when a set time period 
elapses. 

1 1 . The method of claim 7, further comprising: 

changing said common graphical user interface decoration when a user decoration 
change indication is received. 
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12. A method for maintaining the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment, 
comprising: 

storing public title information and a private title information for a nexus graphical 
user interface element associated with a process running on said secured execution 
environment; 

using said private title information for window management functions on said secured 
execution environment when displaying said nexus graphical user interface element; and 

providing said public title information for use in said second execution environment. 

13. The method of claim 12, where said second execution environment includes a 
host window manager for managing graphical user interface elements on said display, where 
said host window manager creates a shadow graphical user interface element for said nexus 
graphical user interface element, and where said public title is used by said host window 
manager. 

14. The method of claim 12, further comprising: 

displaying each of said nexus graphical user interface element on said display 
completely on a display, such that no part of said nexus graphical user interface element is 
obscured by a graphical user interface element associated with said second execution 
environment on said display, where each of said nexus graphical user interface elements 
comprises a common graphical user interface decoration. 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus-user secret graphical user interface element comprising said nexus- 
user secret on said display. 

15. A computer-readable medium containing computer executable instructions to 
maintain the security of data displayed on a display for a system comprising a secured 
execution environment and a second execution environment, the computer-executable 
instructions to perform acts comprising: 

storing an image of at least one nexus graphical user interface element associated with 
a first process running on said secured execution environment; and 
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displaying said nexus graphical user interface element on said display completely on a 
display, such that no part of said nexus graphical user interface element is obscured by a 
graphical user interface element associated with said second execution environment on said 
display. 

16. The computer-readable medium of claim 15, where said act of displaying said 
nexus graphical user interface element comprises: 

ensuring that said nexus graphical user interface element contains no areas of 
transparency. 

17. The computer-readable medium of claim 15, where said act of displaying said 
nexus graphical user interface element on a display comprises displaying said nexus graphical 
user interface element such that no part of said nexus graphical user interface element is 
obscured by a graphical user interface element associated with a second process running on 
said secured execution environment. 

18. The computer-readable medium of claim 15, wherein the computer-executable 
instructions are adapted to perform acts further comprising: 

displaying only said graphical user interface elements on said display upon 
receipt of a user secure display indication. 

19. A computer-readable medium containing computer executable instructions to 
maintain the security of data displayed on a display for a system comprising a secured 
execution environment and a second execution environment, the computer-executable 
instructions to perform acts comprising: 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus graphical user interface element comprising said nexus-user secret 

on said display, where nexus graphical user interface element is associated with a process 

running on said secured execution environment. 

20. The computer-readable medium of claim 19, where said act of displaying a 
nexus graphical user interface element comprising said nexus-user secret on a display 
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comprises: 

accepting a user nexus-user secret display indication; and 
displaying said nexus-user secret. 

21 . A computer-readable medium containing computer executable instructions to 
maintain the security of data displayed on a display for a system comprising a secured 
execution environment and a second execution environment, the computer-executable 
instructions to perform acts comprising: 

accepting at least two nexus graphical data elements, each associated with a process 
running on said secured execution environment, for display on said display; and 

displaying at least two nexus graphical user interface elements, each of said nexus 
graphical user interface elements comprising one of said nexus graphical data elements and a 
common graphical user interface decoration. 

22. The computer-readable medium of claim 21, where said common graphical 
user interface decoration comprises a colored border. 

23. The computer-readable medium of claim 21, where said common graphical 
user interface decoration comprises one or more randomly selected images. 

24. The computer-readable medium of claim 21, wherein the computer-executable 
instructions are adapted to perform acts further comprising: 

changing said common graphical user interface decoration when a set time period 
elapses. 

25. The computer-readable medium of claim 21, wherein the computer-executable 
instructions are adapted to perform acts further comprising: 

changing said common graphical user interface decoration when a user 
decoration change indication is received. 

26. A computer-readable medium containing computer executable instructions to 
maintain the security of data displayed on a display for a system comprising a secured 
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execution environment and a second execution environment, the computer-executable 
instructions to perform acts comprising: 

storing public title information and a private title information for a nexus graphical 
user interface element associated with a process running on said secured execution 
environment; 

using said private title information for window management functions on said secured 
execution environment when displaying said nexus graphical user interface element; and 

providing said public title information for use in said second execution environment. 

27. The computer-readable medium of claim 26, where said second execution 
environment includes a host window manager for managing graphical user interface elements 
on said display, where said host window manager creates a shadow graphical user interface 
element for said nexus graphical user interface element, and where said public title is used by 
said host window manager. 

28. The computer-readable medium of claim 26, wherein the computer-executable 
instructions are adapted to perform acts further comprising: 

displaying each of said nexus graphical user interface element on said display 
completely on a display, such that no part of said nexus graphical user interface element is 
obscured by a graphical user interface element associated with said second execution 
environment on said display, where each of said nexus graphical user interface elements 
comprises a common graphical user interface decoration. 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus-user secret graphical user interface element comprising said nexus- 
user secret on said display. 

29. A system for maintaining the security of data displayed on a display for a 
system comprising a secured execution environment and a second execution environment, 
comprising: 

secured execution environment storage for storing private title information for a nexus 
graphical user interface element associated with a process running on said secured execution 
environment and a nexus-user secret associated with said secured execution environment; 

-22- 



MSFT-28 16/305955.1 



second execution environment storage for storing public title information public title 
information for said nexus graphical user interface element; 

trusted window manager for displaying each of said nexus graphical user interface 
elements on said display completely on a display, such that no part of said nexus graphical 
user interface element is obscured by a graphical user interface element associated with said 
second execution environment on said display, where each of said nexus graphical user 
interface elements comprises a common graphical user interface decoration and said private 
title information. 

30. The system of claim 29, where said trusted window manager displays a nexus- 
user secret graphical user interface element comprising said nexus-user secret on said display. 
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